vuls

Vuls: VULnerability Scanner Vulnerability scanner for Linux/FreeBSD, agent-less, written in Go. Twitter: @vulsen...

cve-2026-31431-ftrace

Mitigazione di cve-2026-31431 tramite ftrace Le soluzioni ebpf disponibili per mitigare cve-2026-31431 richiedono lsm=bpf al momento dell'avvio, che di solito non è impostato per impostazione predefinita. Per OracleLinux questo è stato abilitato per impostazione predefinita in UEKr7u3 e in UEKr8u...

Oracle Linux 9 : kernel (ELSA-2026-59723)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-59723 advisory. - net: ipv6: clear suppressed fib6 rule result Paolo Abeni RHEL-246347 CVE-2026-74581 - i2c: stub: Reject I2C block transfers with invalid length CKI...

Oracle Linux 8 : kernel (ELSA-2026-59821)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-59821 advisory. - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page Maurizio Lombardi RHEL-219613 CVE-2026-64320 - i2c: stub: Reject I2C block...

Oracle Linux 8 : nginx:1.24 (ELSA-2026-59216)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-59216 advisory. - Resolves: RHEL-217957 - nginx:1.24/nginx: NGINX: Memory disclosure and denial of service in ngxhttpslicemodule CVE-2026-60005 - Resolves: RHEL-21930...

Oracle Linux 10 : nodejs24 (ELSA-2026-58819)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-58819 advisory. - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 10 : gstreamer1-plugins-good (ELSA-2026-59972)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-59972 advisory. 1.26.7-2.8 - Fix use-after-free vulnerability in RTP SBC depayloader CVE-2026-18299 Resolves: RHEL-246613 Tenable has extracted the preceding description bloc...

Oracle Linux 10 : pam (ELSA-2026-59379)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-59379 advisory. 1.6.1-9.1 - pamuserdb: fix password comparison timing leak. Resolves: CVE-2026-54411 and RHEL-191704 Tenable has extracted the preceding description block...

Oracle Linux 10 : attr (ELSA-2026-59380)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-59380 advisory. 2.6.0-1 - rebase to 2.6.0 to fix the following CVEs: - CVE-2026-54371 - Symlink Traversal Privilege Escalation via getfattr RHEL-186128 Tenable has extracted...

kernel security, bug fix, and enhancement update

4.18.0-553.158.1 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

Oracle Linux 9 : nginx:1.26 (ELSA-2026-59496)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-59496 advisory. - Fixes CVE-2026-56434 and CVE-2026-60005 - nginx: code execution and denial of service CVE-2026-9256 - Resolves: RHEL-176218 - nginx:1.26/nginx: NGIN...

Oracle Linux 8 : gstreamer1-plugins-base (ELSA-2026-59487)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-59487 advisory. 1.16.1-6.0.1.el810.1 - Update origin URL Orabug: 36209826 1.16.1-6.1 - Add patch for CVE-2026-18297 Resolves: RHEL-246576 Tenable has extracted the preceding...

kernel security, bug fix, and enhancement update

5.14.0-687.42.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

Oracle Linux 9 : python-urwid (ELSA-2026-58952)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-58952 advisory. - Fix CVE-2026-9323: use cryptographically secure session identifiers in web display module Tenable has extracted the preceding description block directly from...

Oracle Linux 7 : 389-ds-base (ELSA-2026-36205)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-36205 advisory. - Security update for CVE-2026-11610 CVE-2026-11774 Orabug: 39697075 - Security fix for CVE-2026-9064 Orabug: 39570202 - Security fix for CVE-2025-149...

Oracle Linux 10 : gstreamer1-plugins-good (ELSA-2026-59133)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-59133 advisory. - Fix CVE-2026-18298 in gdkpixbufdec element Resolves: RHEL-246557 Tenable has extracted the preceding description block directly from the Oracle Lin...

Oracle Linux 10 : firefox (ELSA-2026-58899)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-58899 advisory. 140.14.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding...

Oracle Linux 9 : sqlite (ELSA-2026-58936)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-58936 advisory. - Fixes CVE-2026-11822 - Fixes CVE-2026-11824 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 8 : python-urwid (ELSA-2026-58562)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-58562 advisory. - Use secure random session identifiers in web display CVE-2026-9323 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 10 : sqlite (ELSA-2026-58927)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-58927 advisory. - Fixes CVE-2026-11822 - Fixes CVE-2026-11824 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...